nvnvsm.com

Issued by R3

About this certificate

This digital certificate with serial number 04:c4:a9:dd:1d:37:94:00:6a:f5:87:32:e2:50:58:ca:75:7f was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nvnvsm.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:a9:dd:1d:37:94:00:6a:f5:87:32:e2:50:58:ca:75:7f
Serial Number (int): 415370275265031544135480251211939729536383
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:a4:11:21:a3:2d:bd:19:ee:15:5d:20:93:21:dd:97:46:50:a3:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:6a:e9:87:1c:50:2b:42:20:1f:e8:a5:f7:a8:da:36:f1:02:a6:36
Fingerprint (sha256): 67:ef:ab:59:05:33:7b:d8:69:69:72:76:dc:f1:0b:41:e8:8f:03:af:17:17:56:bf:e7:d2:01:31:61:26:b5:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate nvnvsm.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nvnvsm.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amfcu.com
*.anhoekschool.org
*.aquapurificacion.com
*.austinmartin.com
*.beeries.com
*.byhandandfork.com
*.careerwalmart.com
*.caswellranch.com
*.chiefoneillfestival.com
*.clterry.com
*.cunny.me
*.cursosaudeebemestar.site
*.direxttv.com
*.dreifragezeichen.net
*.felerio.com
*.heera.com.au
*.homemcafee.com
*.hondafinantialservices.com
*.hotel-carmenvalencia.com
*.householdbankcreditcard.com
*.iaascongress2022.com
*.justeasyknow.com
*.lemigrant.net
*.mishal.com
*.nvnvsm.com
*.pdfebookcenter.com
*.pipl.site
*.proveta.com
*.telecommunications.tools
*.thearabhistory.com
*.themusician.network
*.thesillywagon.com
*.throam.com
*.trafficgivetwo.com
*.traveolicty.com
*.turbotaxcalculator.com
*.veenmanpublishers.com
*.video-fenky.com
*.virtualization.tools
*.waco.fish
*.wales.style
*.warrington.church
*.wayne.repair
*.webcam.catering
*.weberfurniture.com.au
*.wellsfargologon.com
*.westvirginia.cash
*.x-trail.net
*.xn--ohqr9lxyaf80e.shop
*.y2matez.com
amfcu.com
anhoekschool.org
aquapurificacion.com
austinmartin.com
beeries.com
byhandandfork.com
careerwalmart.com
caswellranch.com
chiefoneillfestival.com
clterry.com
cunny.me
cursosaudeebemestar.site
direxttv.com
dreifragezeichen.net
felerio.com
heera.com.au
homemcafee.com
hondafinantialservices.com
hotel-carmenvalencia.com
householdbankcreditcard.com
iaascongress2022.com
justeasyknow.com
lemigrant.net
mishal.com
nvnvsm.com
pdfebookcenter.com
pipl.site
proveta.com
telecommunications.tools
thearabhistory.com
themusician.network
thesillywagon.com
throam.com
trafficgivetwo.com
traveolicty.com
turbotaxcalculator.com
veenmanpublishers.com
video-fenky.com
virtualization.tools
waco.fish
wales.style
warrington.church
wayne.repair
webcam.catering
weberfurniture.com.au
wellsfargologon.com
westvirginia.cash
x-trail.net
xn--ohqr9lxyaf80e.shop
y2matez.com

Other certificates including the domain name nvnvsm.com

(limited to 100 certificates)
nvnvsm.com
nvnvsm.com
gempoly.com
aquapurificacion.com
saadiahmed.com
xvideohost.com

Certificate

The complete raw certificate details for nvnvsm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415370275265031544135480251211939729536383
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 21:23:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 21:23:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nvnvsm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 884850098063585163782297040702157883171515636146808974969628109450744428359248675180054435031145364426470532769503696415679270191397394862120339586040506019476009790154745157981139028886318060169895471337084294830309864854559938761316558008818101720148650181387750817933473582691876741284432608854438321643792808345773829962200241963603297099802148013945028744030543414943177124792012842696486300981176416386717036108148501675080168950160441354099859652407881822699321286355610294263414884083330860666756836490785128118463221086659637305922916966800307482086585284283076140695459543512296675286012481346657487382686901140347789934170985751231550114612652532558398338823900263764567865156907761390326559484492912779435518810283756357954066171432960329737835736470073582356926470064423299621216961217381713592964227517720170606065465530860392231133120861102374244630532204791923473036209902263203620977130869160629333626047674328813045188523041255964956184083360439503804631146977446510212041853467981130311559317119984335388695102987397125821205471353618626000181063118663140303933923877944290069270092560304130658246880725593527340900769687557717859008632239016899668682480319993874457240819010732520981890275727114160623438601037999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3aa41121a32dbd19ee155d209321dd974650a3fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.anhoekschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aquapurificacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.austinmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beeries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byhandandfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.careerwalmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caswellranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chiefoneillfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clterry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cunny.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cursosaudeebemestar.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.direxttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dreifragezeichen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.felerio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.homemcafee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hondafinantialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotel-carmenvalencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.householdbankcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iaascongress2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.justeasyknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lemigrant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mishal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nvnvsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pdfebookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pipl.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proveta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.telecommunications.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thearabhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.themusician.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thesillywagon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.throam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trafficgivetwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.traveolicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turbotaxcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.veenmanpublishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video-fenky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.virtualization.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.waco.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wales.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.warrington.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wayne.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.webcam.catering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weberfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wellsfargologon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.westvirginia.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.x-trail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--ohqr9lxyaf80e.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.y2matez.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amfcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anhoekschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aquapurificacion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'austinmartin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beeries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byhandandfork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careerwalmart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caswellranch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chiefoneillfestival.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clterry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cunny.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cursosaudeebemestar.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direxttv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dreifragezeichen.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'felerio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heera.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homemcafee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hondafinantialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotel-carmenvalencia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'householdbankcreditcard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iaascongress2022.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justeasyknow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lemigrant.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mishal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nvnvsm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdfebookcenter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pipl.site'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proveta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telecommunications.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thearabhistory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themusician.network'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesillywagon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'throam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trafficgivetwo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'traveolicty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotaxcalculator.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veenmanpublishers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-fenky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualization.tools'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waco.fish'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wales.style'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrington.church'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayne.repair'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcam.catering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weberfurniture.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfargologon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westvirginia.cash'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'x-trail.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--ohqr9lxyaf80e.shop'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'y2matez.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e87298977000004030047304502200c151f1870d6f92bb233bb2ca34a1c1694947d303cf695f741c147c2a414889a022100a6b72b2ebe52ae251b50d8b695a99007b199ac6997d4ccd4b22dc5454c0b90de007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e872989910000040300473045022100a7b72dba29ad3a0bc4639761f4bdfbb868cd7371f6fe47c51d68f030988b785f022074054a9db0b03afbbafe077951e47eca7d11baef9f5e36ee9deb2da65c46e3e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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